CVE-2022-28994: Smallsrv Small HTTP Server

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

Small HTTP Server version 3.06 suffers from a remote buffer overflow vulnerability via long GET request.

Affected products

• Smallsrv Small HTTP Server: version 3.06 only

Published 2022-04-29. Last modified 2026-06-17.